bugbounty技巧聚合20210901 - 火线 Zone-安全攻防社区

bugbounty技巧聚合20210901

45813

Affirm

[#1312365 Subdomain takeover due to non registered TLD ██████████.█████.██████.com ]

#1213580 Open Redirect

UPchieve

#1166066 No Rate Limit On Reset Password

#1166076 old session dose not expire after password change

Acronis

[#1182465 IDOR on www.acronis.com API lead to steal private business user information](https://hackerone.com/reports/1182465)

挖洞技巧

CVE-2021-26084 Remote Code Execution on Confluence Servers

挖洞工具

https://github.com/knassar702/scant3r

https://github.com/wdahlenburg/interactsh-collaborator